Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
File:                     NJy71cLPQZXMbsfyH2B1gaAiTao.mft (raw, json)
Hash identifier:          /HeYCuX5KUnFE0LCbbwexJLbJBLaCmvwHRYGvqHCNco=
Subject key identifier:   16:52:B8:B4:FF:5F:FE:3E:4A:CE:21:73:02:CB:DE:B2:B8:DA:3B:F1
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       01982859EB7548BCAC00D924D1B64BC5AF7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
Manifest number:          1773
Signing time:             Sun 20 Jul 2025 15:00:38 +0000
Manifest this update:     Sun 20 Jul 2025 15:00:38 +0000
Manifest next update:     Mon 21 Jul 2025 15:00:38 +0000
Files and hashes:         1: 1-6HbqA7aDlwoUQad8DAglohpzBM.roa (hash: SzZCoWo+VKjA6sRcoGc+HABxJp8zCi/nPXQ/9l6+PAA=)
                          2: 1tf4gDn3E8oQJBa1P8YsiAEqDhM.roa (hash: 79Cfn4DIphA5rCTAyXxPmRPIy+pQ3OnQkEroI7+/vWI=)
                          3: 2mR5XJM5LrYDZGVcubbLp9z9mZY.roa (hash: EuQxIpZO0qFCZhL2ClxvLOJhKQDZsHqs5wudD54Am90=)
                          4: 67Mxj3KpQWipNpMlLApfSyTCvC0.roa (hash: Fv9QcoJhLdt0inevu/XCAdGmMRCdZt4H9qb4Kzk/RZ4=)
                          5: 6I5lT77tINLa2tAFzIKdxBUfZOY.roa (hash: XJgZ7FSKAHc+Qdclhb6uD5MNen9bjsZ0E6qGnEqSr1g=)
                          6: 6ZX8OszHhJsECzIT2pWthbGNYA4.roa (hash: yAmivsrz6/2HJ5FMGGP7u21yzZpmlon/kbzZpQ7zXlU=)
                          7: 85QzFbnMGxJTY5LHGuo2Ciw9XIc.roa (hash: IxzG5S/bwgqBEnXOIi/86lsADEbT+PmU0aEP0kJ6y34=)
                          8: 8eDdBsgY2IyhmucFkbHm5Vqa4dg.roa (hash: 4395eHok2K6kmkkM0vCUMdpi272lI5L2QlfvQJmQQ18=)
                          9: BpxpMqtX2BI2HvmcJUH48xghR8g.roa (hash: mXU7HG44i69F2PkGAd8XWDXPFOvH8VQ4AEhwr2wm/4A=)
                          10: CcLRGj42YfBnS-DSMVQ56Ed1ds8.roa (hash: p6KK3vhNlRrVRpgQjaHC47rAMguNzRk9ILNOwRtTjlE=)
                          11: FGSgqrwNLhXLwg1S2ZK0xt8IR8o.roa (hash: 3X+u2TulIQ+223zfBkCoqvdCuLiPeJGT7BfA/QX4ybM=)
                          12: M714mkyeLGecG3CxD57_mFs1bVI.roa (hash: sWZ4L0BbCyDSxcxQBSHqJ3/DS0RNI5BibcEqYwkAaKY=)
                          13: NJy71cLPQZXMbsfyH2B1gaAiTao.crl (hash: mNl/DozZWHb66Pb9Nwv8YBqM+FXqFY0GFmIrIgVHxiQ=)
                          14: OGNgSBnS5LL9Xv4166xoSNj2Qgk.roa (hash: UpDugUA+S5inn+tM4AsMp2shynTSyqMx+49tE41PsnY=)
                          15: PEoZfoYdNr1qVIgnLZ4amvEUrag.roa (hash: SNEfapYhHSmO6/Ur6ok6ZNa7NyfMTjRxDXRwCic4N6c=)
                          16: QUnehr_kZKHLhvQEj3Ssg4_t_nw.roa (hash: pDBfZZRKwoZuTfpz6jhhOBgKtWerJ03avKek91I2yqw=)
                          17: QWYCXjPRwOA0N240TJ265a4Z_VY.roa (hash: MISdOk98xfsYVUHhbSa9VseYnCT528QSK0OmifOhA2o=)
                          18: SdAO5znpfdFPK3Hqe-_r4_nJ8qY.roa (hash: 0t61EacIVCgeyWoWNgl6pkppBifI3GCHVv8rPuzvXjg=)
                          19: WhGWPzS8xGDxCqrYjxVfnm6jt6Q.roa (hash: wsT36h4NahjqudtK9upbeMXxjGzvszhUfYQrxfMufBo=)
                          20: YboMhCcJstKJLHmryBstvAc5aZc.roa (hash: u/gxCUCoqsgS01TZF0mszEtlLhY6+L1clteDdKf6jws=)
                          21: _01k3y56cEMdQ42iOKunr2RMUeM.roa (hash: DGyUgtSPD/8CoWC86Wf/mLLAiyFkCUgpPiidGCEavaM=)
                          22: _J5JILR3g08GxLAZwtS6oNKzzbg.roa (hash: +0wOL34h1f907y9gzbHeDfv9Uc8iaCon6ZoP4ErVzj8=)
                          23: anRCvSGXJN-cP3l_C6L2k19y4zA.roa (hash: o5ciTWqaZzCbSMaIT6261kWGdGN0gxeTcqMlc5EBp70=)
                          24: bnhnwGtxHINXcM631Yss2WLwBb0.roa (hash: vy0q+FDPe1MhIaUoThi0JFBnA0yafPxZ75/c6oik+Pc=)
                          25: cjVSdfcgI6USxReLgdHC9_M0CkU.roa (hash: K+5hqpPR7v+LnoyEKIel1in1wybIaUOudcefnvqwGM8=)
                          26: dbVfA_fXprSS4i2QZkFruITo2AE.roa (hash: rakhWVMFHWlUieRihs0aD8m0Lp0z1R0bTv8p0JLqNxw=)
                          27: eks95w96IDU3y7FJtqpJE2ERD5g.roa (hash: L7xCEIYpGK6CRbHPIfP9mIdxc/3UabGk1gnSMBDQAsk=)
                          28: hc2McJqF4N3N5DqmfZVvhbBzlWQ.roa (hash: 4sE06Tj9fahjIdQpeuoDI6eoz2VyIxEa5JczYP+Nyts=)
                          29: iBvpdliIAK2Zf8xNOT8cOAUyIS8.roa (hash: 4MegK6q5ykGxVVP7aLQRiSEl935bFcwTgGkkgxP4a1c=)
                          30: jglHMQosHm5EePmNaCszZnbBZOs.roa (hash: R0FPP1nLh3wCW9tN4EPA/+UY2zsuEsyvpDHM+ViEarg=)
                          31: kJufVgfjrdPcdWX3qkA2KR7YHjs.roa (hash: UenVgpDEIkOxY2nxxhtL1w6EOZcg5gQgNjcAOlbKVrI=)
                          32: kqno_oeousw5ueAimcHkmEBcyD8.roa (hash: sGt/+QgQJ5sK9hve8sGsSixqb0pi64U006Qlo4e7N3Y=)
                          33: larXL9Oe9S4uArTjfDphSAdcBAQ.roa (hash: ma0kItoUqJ36KR7dotIN1oZE5Sg0M1CpYHLILnMO2cc=)
                          34: p5fOAj13O-8C6VVCmQWMZlH3Jl0.roa (hash: fnDhIuo9lowvmM1vEPfnQ/U7JNE5xCEXzEKbsMm8PPI=)
                          35: pAOdgvf-88bUESvFBoyLLnRj2oM.roa (hash: unjJHwtKYlvTaRdGwafd8E56bsSmlQmKJExK/izsPzk=)
                          36: pT_ZWeWrDBZXlJT59YfSXenr7UY.roa (hash: a4gHqVuJr7SaqDMkDhokbLWpX48XdW1+tjxuBZTe+EA=)
                          37: xvL0p77JiJrGiBjGCkpTdIl0pqg.roa (hash: TOTVx2FQSqH/I+BZfh59ASt+a7+rGFaqiWuc53BIqus=)
                          38: yIyWnl3cvTDId_6ZmTKY5jJakPE.roa (hash: +1tONpNtNdDr07avb/OWCH56FfRCHMRObDGwSselHQE=)
                          39: ydWaptTCZ1SNEwil1BbHypZ9Ba8.roa (hash: BhTcs+/2LQYOi7mDvF/DM/pd2EK+d2j9shnP8PN24oU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:28:59:eb:75:48:bc:ac:00:d9:24:d1:b6:4b:c5:af:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Jul 20 15:00:38 2025 GMT
            Not After : Jul 21 15:00:38 2025 GMT
        Subject: CN=1652b8b4ff5ffe3e4ace217302cbdeb2b8da3bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3c:cb:22:90:72:87:cc:22:1f:3c:4e:59:a6:
                    2a:ce:9a:11:b7:39:df:32:82:cb:7f:bf:b7:c4:05:
                    08:e0:7d:4f:22:30:db:0d:1b:79:9a:74:73:2f:ac:
                    7d:dd:fc:e7:aa:93:0d:12:a8:6e:e9:da:43:7b:26:
                    8c:35:15:22:18:1d:92:e4:85:36:1d:c4:2c:cc:68:
                    aa:a5:4a:38:73:f1:6a:05:d1:5f:40:49:83:9e:ab:
                    78:52:bb:a4:3b:fd:75:93:22:3d:c0:09:30:83:b1:
                    b7:5e:5f:12:27:21:b4:7e:0b:2c:c9:56:7c:f7:06:
                    b5:05:ef:6b:c4:22:25:35:2a:36:f3:36:cd:ba:d5:
                    d5:bd:0b:a7:bf:7d:24:d9:a0:45:1c:3c:61:18:83:
                    97:ef:a4:99:e5:4e:19:28:01:14:9c:d9:cd:eb:16:
                    7d:ae:53:c9:12:b3:4f:ee:5b:d2:c3:b7:93:17:a7:
                    70:c9:92:df:7c:44:e3:2d:a7:34:2d:1a:64:28:dc:
                    b5:7e:f5:2c:f9:52:59:d6:fc:36:10:54:32:5e:fe:
                    c9:e3:b0:ab:30:9a:a8:6f:de:86:33:37:f7:17:66:
                    3e:f7:cd:78:b2:08:19:84:ba:b2:9d:4d:6c:74:90:
                    f1:2d:7a:6f:25:49:ba:93:cb:f0:59:dc:cb:bd:e6:
                    7d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:52:B8:B4:FF:5F:FE:3E:4A:CE:21:73:02:CB:DE:B2:B8:DA:3B:F1
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:9f:59:f6:30:7f:a4:26:8a:7b:ac:03:14:b8:df:aa:33:73:
         a8:d3:27:ed:23:ca:f8:cb:d1:09:76:af:1f:d2:32:f0:79:61:
         e3:3c:ec:94:ef:3b:28:20:6b:df:ec:9b:25:81:53:ed:ce:28:
         82:04:33:f6:aa:f2:b5:54:3a:13:ef:b8:7a:43:67:a8:49:47:
         39:81:52:b9:20:fb:b4:fa:fa:24:16:ee:fc:24:8e:f5:97:25:
         a9:f5:b9:a4:24:02:ef:f6:e2:e9:8e:fd:b4:3d:d9:56:09:ca:
         d8:e0:27:4b:47:d1:d4:0e:53:29:6b:6f:99:25:95:95:8a:64:
         f3:0d:c6:e0:79:0e:0e:5d:f4:00:a4:29:06:22:37:b6:65:dd:
         68:ed:d5:f0:8f:11:48:cb:40:f4:9e:30:85:5b:a1:49:39:42:
         76:94:58:8c:6e:f4:c8:df:e6:b9:52:e2:89:12:30:1b:dc:57:
         d0:02:41:49:60:68:2c:01:bf:3c:a4:6e:03:68:83:96:31:ea:
         0e:16:01:3c:27:d6:83:73:89:da:66:16:6f:5f:a0:1e:d0:d2:
         6f:26:0f:16:6e:38:bf:15:05:b5:e1:68:cd:dd:a5:e4:5e:c7:
         22:5e:30:e8:a1:b0:d0:a9:f7:a5:6b:7a:3c:51:bf:94:b7:8d:
         65:11:82:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----